Solved: Re: ASA5506 Firewall question

grggyoung · ‎11-05-2017

I am quite green with ASA5506 and have a question(s). I am setting up a 5506 to replace our 5505 and have questions with regards to the NAT settings. I have setup two bridge ports configured each with 3 interface ports. I thought I would have setup a NAT rule for the bridge port but it appears I need to configure the rule for the interface. Is that correct? It also appears I need to configure SSH/ASDM access by interface not by bridge ports.

I feel like I'm missing something, any advice would be appreciated.

Karsten Iwen · ‎11-05-2017

Your observation is right. I don't know why Cisco implemented it that way, but you need a nat-, ssh-, http- (and so on) command per interface. That's also documented in the configuration guide.

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

View solution in original post

Karsten Iwen · ‎11-05-2017

Your observation is right. I don't know why Cisco implemented it that way, but you need a nat-, ssh-, http- (and so on) command per interface. That's also documented in the configuration guide.

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.